Review · Crisis simulation inside an IR platform
BreachRx review: tabletop exercises inside an incident response platform
BreachRx is an incident response management platform, and AI Tabletops is one module: exercises are designed, run and documented in the same Rex Platform the team uses in a live incident. It scores 6.5 of 10, tied for fifth. It scores 8 on cross-team exercising, but it has no labs or range, no content library and no published price.
Editorial assessment · Assessed from vendor sites, product pages and published pricing · BreachRx and Cytactic assessed 13 October 2026
Ranked =5 of 9
Editorial verdict
A fit when the incident response platform is the purchase and exercising is part of it. Not a training platform for analyst skills.
| Fact | Detail | Source |
|---|---|---|
| Category | AI-accelerated Cyber Incident Response Management (CIRM) Platform; tabletops are one module | breachrx.com |
| Who takes part | Security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners, or one team in a micro-exercise | breachrx.com/rex-platform/ai-tabletops |
| Scenario setup | Rex AI Exercise Agent builds organisation-specific scenarios and generates moderator guides, timelines, injects, decision points and participant materials | breachrx.com/rex-platform/ai-tabletops |
| Cadence | "Annual, monthly, biweekly, or whenever conditions change" (vendor wording) | breachrx.com/rex-platform/ai-tabletops |
| Evidence | After-action reports, executive summaries, gap analyses and prioritised improvements; gaps feed back into workflows for a retest | breachrx.com/rex-platform/rex-agentic-ai |
| Regulatory context | Cyber RegScout updates tasks, deadlines and disclosure milestones as the scenario changes | breachrx.com/rex-platform/rex-agentic-ai |
| Integrations | 21 listed, including Jira, ServiceNow, Slack, Teams, Zoom, Okta, PagerDuty and CrowdStrike | breachrx.com/rex-platform/integrations |
| Labs or range | None described | breachrx.com/rex-platform/ai-tabletops |
| Price | Not published; a free, facilitated exercise for qualifying healthcare providers was announced on 6 October 2026 | breachrx.com/blog/free-healthcare-tabletop-exercise |
| Company | $15M Series A (May 2025) led by Ballistic Ventures; over $23 million raised; more than 100 customers as of May 2025 | breachrx.com/press-release/breachrx-closes-15m-series-a-funding-to-end-the-chaos-of-cybersecurity-incident-response |
6-1What does BreachRx do?
BreachRx describes itself as an AI-accelerated cyber incident response management (CIRM) platform. Its Rex AI agents are coordinated by an orchestrator it calls Maestro, and Cyber RegScout updates tasks, deadlines and disclosure milestones as the scenario changes.
AI Tabletops is one module. It covers an exercise from design to after-action report: the Exercise Agent builds an organisation-specific scenario and generates the moderator guide, timeline, injects and participant materials, and the session ends with an after-action report, gap analysis and prioritised improvements. The vendor's page says AI does not make incident decisions; people keep judgment and approvals.
6-2Who is it built for?
Incident response leaders and the cross-functional response group: security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners. It is not built for analysts building technical skills.
6-3What does it cost?
BreachRx does not publish pricing. Access is through a demo. It scores 1 of 10 on pricing transparency.
6-4Where does it lose?
- Hands-on depth, 2 of 10: no labs or range. Immersive Labs, Hack The Box and Cyberbit score 9.
- Breadth and free access, 3 of 10: no library or free tier.
- Realism, 7 of 10: a scenario that reacts to each decision is not described; Reflex Security scores 9.
- Pricing, 1 of 10: nothing published.
6-5How does it score on each criterion?
Rex AI's Exercise Agent builds organisation-specific scenarios around emerging threats, incident types, business units and dependencies, with scenario developments delivered live; a scenario that branches on each decision is not described.
Enterprise-wide exercises for security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners, or focused micro-exercises for one team.
After-action reports, executive summaries, gap analyses and prioritised improvements; gaps are captured automatically. Framework mapping and benchmarks are not described.
The Exercise Agent generates moderator guides, timelines, injects and participant materials, and the vendor names a monthly or biweekly cadence; a human moderator still runs the session.
No labs, range or hands-on investigation environment is described; it exercises decisions and response workflows.
No content library or free tier; a free, facilitated exercise is offered only to qualifying healthcare providers.
No price published; access is through a demo.
Strengths
- Exercises run in the same platform used for live response.
- Broad seats, from security to legal, communications, executives and outside partners.
- Gap analysis that feeds back into playbooks and owners before a retest.
Limitations
- No labs, range or skills content.
- No published price.
- No framework mapping or benchmarking described.
6-6What should you compare it with?
See BreachRx alternatives or compare BreachRx with other platforms